This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/6EIMxUGXsynPo9rEQzJnVPG98WI.roa File: 6EIMxUGXsynPo9rEQzJnVPG98WI.roa (raw, json) Hash identifier: VbFvYrwcCtKMyImGiFiN8H8Az5Dp2KBcZOXOTXrbmhw= Subject key identifier: E8:42:0C:C5:41:97:B3:29:CF:A3:DA:C4:43:32:67:54:F1:BD:F1:62 Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Certificate serial: 019BB7AF3FC962BDA9E7CD6170117F5E9D85 Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/6EIMxUGXsynPo9rEQzJnVPG98WI.roa Signing time: Tue 13 Jan 2026 14:07:54 +0000 ROA not before: Tue 13 Jan 2026 14:07:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60718 IP address blocks: 2.57.72.0/22 maxlen: 24 2a07:2700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:af:3f:c9:62:bd:a9:e7:cd:61:70:11:7f:5e:9d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Validity Not Before: Jan 13 14:07:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8420cc54197b329cfa3dac443326754f1bdf162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b7:1b:04:26:7d:bb:f4:64:8b:0d:0d:5d:b2: d8:79:11:f8:10:c0:be:ba:d8:e1:89:6a:ed:e6:df: 04:08:41:b3:c0:5b:ef:e1:90:0c:ff:2b:05:0b:7a: 9d:d9:92:b7:86:31:03:2b:ab:d2:9f:57:a8:65:01: e3:c8:11:a2:72:bd:f6:a1:3e:38:0a:0b:73:89:4d: 7c:0f:fb:61:6a:88:55:eb:fd:b5:c1:7f:3e:8f:dc: 6e:2c:4c:09:3a:b2:99:b2:b5:b9:fc:2c:e9:70:f5: ba:c6:97:1c:24:9c:ef:b4:d2:f1:1c:4f:b8:cc:8b: 85:41:33:cc:00:15:25:5c:df:74:7d:08:28:80:4b: cf:b3:e2:17:f9:a7:cd:66:cf:5e:b2:73:63:7b:ad: a1:51:51:ec:4a:c2:5c:cf:8f:99:80:45:c5:9d:84: 7b:7b:35:5f:59:ac:3b:5e:db:ee:af:b8:53:b2:66: 20:8b:56:0b:3a:ec:89:47:5f:cb:d1:b7:80:14:a7: 6d:2c:3a:a6:56:70:af:1c:66:15:fe:14:8a:2a:fa: 05:63:d2:ae:cb:c1:3a:95:f0:4a:66:52:5d:f0:ec: 3c:a1:59:d9:dc:c9:ff:b1:d1:49:29:55:1c:9d:aa: 63:1e:c6:28:d9:34:97:07:aa:c5:1b:49:0c:9f:8c: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:0C:C5:41:97:B3:29:CF:A3:DA:C4:43:32:67:54:F1:BD:F1:62 X509v3 Authority Key Identifier: keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/6EIMxUGXsynPo9rEQzJnVPG98WI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.72.0/22 IPv6: 2a07:2700::/29 Signature Algorithm: sha256WithRSAEncryption a4:51:35:0b:e8:2e:e2:04:a9:f0:e7:7b:cb:e4:69:6d:12:ed: 47:a0:7f:d9:f7:a4:12:a2:80:d7:bf:a3:f6:d5:99:89:d8:b3: 22:d7:46:c3:f0:eb:d0:b1:57:97:32:a5:27:b9:d5:20:6e:26: 79:f2:3c:db:2a:c0:4a:3e:30:be:a7:51:e3:0e:10:59:bc:e2: 85:0a:7f:51:03:32:18:77:b1:44:67:44:50:b0:34:f8:3f:38: ae:92:c9:e0:a8:53:98:85:f8:2f:cd:e0:bd:74:3c:0a:2f:4f: 0e:e4:a4:90:29:6f:c3:89:56:6b:af:b3:52:0b:b1:5c:48:8a: 2d:36:19:79:c5:fa:4e:5e:92:c9:b2:ba:fb:13:04:c7:78:58: 1b:a3:6e:1d:ec:3f:33:5e:e4:16:94:69:f7:89:f5:4b:7c:ef: 9c:6c:24:f8:0c:d3:73:48:6d:f4:76:ec:7d:b3:8d:aa:b6:53: c6:5d:1c:cb:f8:f3:03:f6:ae:2a:14:9f:f4:a3:4a:18:0f:3d: 5c:85:f2:3c:14:a3:c4:81:de:f3:d9:43:df:bd:92:02:84:ab: db:f0:a0:87:7d:a4:13:2a:09:93:29:da:5b:c1:da:01:87:83: 10:e5:6e:1f:44:3c:4b:c3:13:47:b9:ab:29:83:1d:b6:8a:ea: a4:08:0d:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZu3rz/JYr2p581hcBF/Xp2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh OWRjOWYwHhcNMjYwMTEzMTQwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODQyMGNjNTQxOTdiMzI5Y2ZhM2RhYzQ0MzMyNjc1NGYxYmRmMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibcbBCZ9u/Rkiw0NXbLYeRH4EMC+ utjhiWrt5t8ECEGzwFvv4ZAM/ysFC3qd2ZK3hjEDK6vSn1eoZQHjyBGicr32oT44 CgtziU18D/thaohV6/21wX8+j9xuLEwJOrKZsrW5/CzpcPW6xpccJJzvtNLxHE+4 zIuFQTPMABUlXN90fQgogEvPs+IX+afNZs9esnNje62hUVHsSsJcz4+ZgEXFnYR7 ezVfWaw7Xtvur7hTsmYgi1YLOuyJR1/L0beAFKdtLDqmVnCvHGYV/hSKKvoFY9Ku y8E6lfBKZlJd8Ow8oVnZ3Mn/sdFJKVUcnapjHsYo2TSXB6rFG0kMn4zaYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOhCDMVBl7Mpz6PaxEMyZ1TxvfFiMB8GA1UdIwQY MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt ZTg1NjYxM2QyYjEwLzEvNkVJTXhVR1hzeW5QbzlyRVF6Sm5WUEc5OFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCAjlIMA0E AgACMAcDBQMqBycAMA0GCSqGSIb3DQEBCwUAA4IBAQCkUTUL6C7iBKnw53vL5Glt Eu1HoH/Z96QSooDXv6P21ZmJ2LMi10bD8OvQsVeXMqUnudUgbiZ58jzbKsBKPjC+ p1HjDhBZvOKFCn9RAzIYd7FEZ0RQsDT4PziuksngqFOYhfgvzeC9dDwKL08O5KSQ KW/DiVZrr7NSC7FcSIotNhl5xfpOXpLJsrr7EwTHeFgbo24d7D8zXuQWlGn3ifVL fO+cbCT4DNNzSG30dux9s42qtlPGXRzL+PMD9q4qFJ/0o0oYDz1chfI8FKPEgd7z 2UPfvZIChKvb8KCHfaQTKgmTKdpbwdoBh4MQ5W4fRDxLwxNHuaspgx22iuqkCA24 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:53 2026 by rpki-client